heap-exploitation
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading external security research tools and repositories.
- Fetches the how2heap reference implementations from a public GitHub repository.
- Instructs the agent to install the heapinspect Python package via pip.
- [COMMAND_EXECUTION]: Contains shell commands for environment setup and heap analysis.
- Includes commands for cloning repositories and installing Python packages.
- Integrates with pwndbg for inspecting heap chunks, bins, and memory layouts.
- [DYNAMIC_EXECUTION]: Provides Python templates and logic for creating exploitation scripts.
- Includes safe-linking obfuscation and deobfuscation logic for modern glibc versions.
- Offers templates for forging complex memory structures such as _IO_FILE and vtables.
Audit Metadata